RevoiceLabsLegal
Privacy Policy
This Privacy Policy explains how [Company legal name], IČO 57670005, with registered office at Obchodná 559/37, 811 06 Bratislava, Slovakia ("RevoiceLabs", "we", "us") collects, uses and shares personal data when you visit revoicelabs.io, use the application at app.revoicelabs.io, or otherwise interact with us (the "Service"). We act as the data controller for the data described here, except for data inside the materials you upload, where we act as your processor (see section 6).
1. Data we collect
1.1 Data you give us
- Account data: name, email address, password (stored as a salted hash), avatar, two-factor authentication secret if you enable it, team and workspace names, and emails of people you invite.
- Content: landing page files, images, videos, scripts, briefs, brand names and text that you upload or enter, plus the Output the Service generates for you and your edits to it. Content may incidentally contain personal data of third parties (for example a customer name in a testimonial). You are responsible for having the right to upload it.
- Billing data: plan, billing period, credit balance and purchase history. Card details are entered directly with our payment processor and are never stored on our servers. For cryptocurrency payments we store the transaction reference.
- Communications: support requests, emails and feedback you send us.
1.2 Data collected automatically
- Session and security data: IP address, browser and device type (user agent), login timestamps, session identifiers and an activity log of key actions (for example login, password change, purchase, deletion). We use this to keep accounts secure and to investigate abuse.
- Usage data: which features you use, credits consumed per operation, errors and performance metrics.
- Analytics data: if you consent to analytics cookies, Google Analytics 4 collects pseudonymous information about your visit — pages viewed, time on page, approximate location derived from a truncated IP address, device and browser type, and a randomly generated client identifier. Analytics is not loaded and no analytics cookies are set unless you accept them in the cookie banner.
- Attribution data: if you consent to attribution cookies, we store the referring website, UTM campaign parameters, advertising click identifiers (such as gclid or fbclid), the referral code from the partner link you used, and the first page you landed on, in a first-party cookie (see the Cookie Policy). If you then create an account, this data is saved to your account so we can attribute the sign-up to a campaign and credit the referring partner.
1.3 Data from third parties
- Payment processors send us confirmation of payment, the last four digits and brand of the card, and the billing country.
- If you join a workspace by invitation, the inviter provides your email address.
2. How we use data
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Provide the Service: accounts, workspaces, processing your Content and generating Output | Account data, Content, usage data | Performance of a contract |
| Billing, credits, invoices, fraud prevention | Billing data, session data | Contract; legal obligation; legitimate interest |
| Security: authentication, abuse and intrusion detection, rate limiting | Session and security data | Legitimate interest |
| Support and communication about your account | Account data, communications | Contract; legitimate interest |
| Marketing attribution and referral rewards | Attribution data | Consent (withdrawable at any time) |
| Product news and offers by email | Email address | Consent (you can unsubscribe at any time) |
| Improving the Service, aggregated product analytics | Usage data (aggregated or pseudonymised) | Legitimate interest |
| Website audience measurement with Google Analytics | Analytics data | Consent (withdrawable at any time) |
| Legal compliance and enforcing our Terms | Any of the above as necessary | Legal obligation; legitimate interest |
We do not use your Content or Output to train our own or third-party AI models, and we do not sell personal data.
3. AI processing and sub-processors
To generate Output, the Service sends the relevant parts of your Content and prompts to third-party AI and media providers. These providers process the data on our behalf under their business terms and do not use it to train their models where such terms are available. Current categories of sub-processors:
- AI model gateway and model providers for translation, text and image generation (currently OpenRouter and the model vendors it routes to, such as Google).
- Speech and video rendering providers for voice-over and video scenes (currently Replicate and the models hosted there).
- Stock media API for optional b-roll footage (currently Pexels; only search queries are sent).
- Hosting and storage for the application, database, uploads and backups.
- Payment processors (for example Stripe for cards and a cryptocurrency payment processor).
- Email delivery for transactional emails (verification, password reset, invoices).
- Website analytics (Google Analytics 4, provided by Google Ireland Limited) on revoicelabs.io, loaded only after you consent. IP addresses are truncated by Google before storage and we have disabled data sharing for advertising purposes and Google Signals.
An up-to-date list of sub-processors with locations is available on request at support@revoicelabs.io.
4. Sharing of data
We share personal data only with: the sub-processors above, strictly for the purposes described; members of your workspace, who can see your name, avatar and shared projects; professional advisers; authorities where required by law or to protect rights, safety and property; and a successor in the event of a merger, acquisition or asset sale, subject to this Policy.
5. International transfers
We are established in the Slovak Republic and process data primarily in the European Union. Some providers, including AI model and analytics providers, process data in the United States and other countries outside the EEA. For such transfers we rely on the European Commission adequacy decision for the EU–US Data Privacy Framework where the provider is certified, and otherwise on the EU Standard Contractual Clauses together with supplementary technical measures. You can request a copy of the relevant safeguards at support@revoicelabs.io.
6. Data inside your materials and your landing page statistics
Where your Content contains personal data of your customers or other people, you are the controller and we process it on your instructions as your processor, only to provide the Service. The optional view-tracking feature for pages built with the Service records aggregate events (page view, video watch depth, clicks) through a public endpoint. It does not set cookies for visitors of your pages and stores only counters, not identifiers. You are responsible for informing visitors of your pages about any tracking you enable, as required by local law.
7. Retention
- Account data: for the life of the account and up to 30 days after deletion, then removed from active systems; backups are overwritten within 90 days.
- Content and Output: until you delete them or your account is deleted, plus the backup window above.
- Billing records: 7 years or as required by tax and accounting law.
- Session and activity logs: 12 months.
- Attribution cookie: 90 days in your browser; the attributed data saved on the account is kept for the life of the account.
- Google Analytics: event and user data retained for 14 months by Google, then deleted automatically.
- Consent record: 12 months if you accept, 6 months if you decline, after which we ask again.
8. Security
We use HTTPS everywhere, hashed passwords, signed session cookies, optional two-factor authentication, rate limiting, access controls and logging. No system is perfectly secure; if we learn of a breach affecting your data we will notify you and the relevant authority as required by law.
9. Your rights
Under the GDPR and Slovak Act No. 18/2018 Coll. on personal data protection you have the right to access, correct, delete, restrict or object to processing of your personal data, to data portability, and to withdraw consent at any time without affecting processing carried out before withdrawal. You also have the right to lodge a complaint with a supervisory authority; in Slovakia this is the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR), Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk. You may also complain to the authority in your country of residence. You can change account details, export texts and files, and delete your account from Settings. For other requests email support@revoicelabs.io; we respond within 30 days and may ask you to verify your identity.
California residents: we do not sell or share personal information for cross-context behavioural advertising. You may exercise the rights above under the CCPA/CPRA without discrimination.
10. Children
The Service is for adults (18+) and businesses. We do not knowingly collect data from children. If you believe a child has provided us with data, contact us and we will delete it.
11. Cookies
See our Cookie Policy for the cookies and similar technologies we use and how to control them.
12. Changes
We may update this Policy. Material changes will be announced by email or in-app before they take effect. The date at the top shows the current version.
13. Contact
[Company legal name]
IČO: 57670005
Obchodná 559/37, 811 06 Bratislava, Slovakia
Email: support@revoicelabs.io